Cybersecurity

Cybersecurity you can count on

We earn your trust by protecting your data, identity, and assets.

See Security Guarantee
Person using a smartphone with a graphic explaining that data is protected through people, process, and technology.

Putting your trust and security first

Hear directly from our Chief Information Security Officer, Doug Peterson, on the people, process, and technology that keep you secure.

Watch now
Empower Security Guarantee, highlighting protections designed to help safeguard customer accounts and information.

Protecting what matters most

Strong cybersecurity safeguards, trusted encryption, and a firm commitment to protect your data and privacy.

Protecting your data is our first priority

Our systems are built with cybersecurity at the core. We constantly evolve to stay ahead of threats. 

Verifying it’s really you

We use multifactor authentication to reduce the chance of account takeover.

Encryption you can count on

Your data is encrypted with AES-256 multifactor key management, including user specific keys and salts to keep it safe.

We do not sell your data

We never sell your participants’ data. Our business is built on protecting your privacy, not profiting from it.4

We store all your data in the United States

Your data is stored here — safeguarded by U.S. privacy and security laws.

Our security framework: Innovation and vigilance

  • A modern cloud-based technology platform we own and manage
  • An unqualified, clean, comprehensive annual SOC 2 Type II report with no exceptions
  • DOL cybersecurity best practices met or exceeded
  • Verizon Cyber Risk Program certified + PEN testing
  • Policies aligned to NIST 800-53, NIST CSF, and other leading industry standards
  • Continuous audits in a highly regulated environment (SEC, FINRA, DOL, DOI, DOB)
Cybersecurity compliance graphic highlighting an independently audited SOC 2 Type II report with clean results and alignment with recognized security standards.

Our Empower Security Guarantee

Participants are automatically enrolled in our Security Guarantee — with no cap to reimbursements, nor eligibility requirements.

See Security Guarantee